Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer
File: E6-mzmVC4btSPh0DvQCk0it_2u0.cer (raw, json)
Hash identifier: qsDzPO2B4gyhIwrnEI1ppvOiMLhLCGkUh+a7l4lfqPw=
Subject key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747B61ACD4E811B8D35D7D4966867DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211417
IP: 185.144.92.0/22
IP: 2a03:a920::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b6:1a:cd:4e:81:1b:8d:35:d7:d4:96:68:67:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:22:b7:e7:e5:36:d4:2f:1b:a0:1e:c6:bd:
86:a7:a0:12:af:88:67:bc:b6:30:fc:aa:b0:0a:86:
8b:fa:f7:b4:6a:cb:90:27:43:d6:00:c1:f2:d0:a2:
56:1c:96:24:5e:81:04:3a:49:56:5e:35:66:9b:ac:
35:1f:3f:d8:bb:35:79:58:97:38:ad:64:85:78:c0:
67:86:b3:bb:6a:49:63:8f:65:11:5b:f8:97:4b:de:
50:46:90:1a:02:a7:81:57:15:71:b0:11:1d:40:22:
31:19:a2:f3:68:bd:9b:c7:c1:88:1c:e3:ec:19:54:
af:c9:7e:de:87:3b:38:90:7a:ff:6a:31:dd:6d:af:
06:a8:ec:14:7d:21:43:60:dc:0e:55:43:1c:0f:0b:
4f:66:d8:8e:fd:e4:d9:ed:eb:91:07:0f:46:45:f1:
78:27:6b:01:20:de:8c:54:98:35:8d:e4:30:82:03:
b1:f1:87:f9:8a:2c:49:fc:33:ae:82:6f:e2:98:99:
6c:d3:c4:a6:d6:35:48:d0:1f:fc:c0:65:3d:a9:c3:
6a:1a:11:59:60:a7:07:56:ec:03:1a:ba:cf:a5:0d:
4b:47:de:85:f1:07:69:f7:d3:7b:9d:cc:49:bb:d2:
c4:9c:46:6b:7c:0b:78:77:22:0c:75:ac:5a:91:95:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.92.0/22
IPv6:
2a03:a920::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211417
Signature Algorithm: sha256WithRSAEncryption
4c:fa:94:61:0d:fb:a7:39:70:fe:e7:7d:aa:2c:98:4a:7b:17:
4e:ea:7e:aa:3a:ea:02:4f:2d:c6:9a:bc:47:99:f8:f6:dc:f2:
74:4e:1f:63:98:bc:a6:35:70:be:39:f3:76:a6:ff:0e:70:0d:
9e:7d:bf:10:0a:f5:5c:1b:7f:4a:0e:1e:4d:23:92:92:36:ba:
ce:b1:eb:ea:05:26:6b:38:7a:18:d8:5f:ca:5a:0e:6a:c9:3b:
18:0f:51:b9:23:83:5f:d9:75:f5:24:52:41:37:fd:db:a0:25:
5e:80:ce:22:d5:96:b7:e8:e3:3f:38:11:5a:99:b8:7d:42:a7:
0a:a4:15:5a:17:5c:ad:88:94:f2:7a:2b:fb:6f:05:e2:7b:a9:
19:53:c3:de:d6:2b:d5:8a:54:44:e0:0e:c1:60:b1:10:85:b3:
e6:d8:90:cb:5e:f1:8d:ec:ce:08:52:83:1d:c8:2e:f4:6e:8a:
ac:52:5e:2b:e7:3e:d3:c6:e8:10:f8:e1:e3:cf:c7:e7:2c:0e:
b5:ae:3f:c7:3c:a6:f6:cf:10:c6:dc:95:4e:ed:6a:21:00:bd:
27:56:04:3f:51:af:41:d6:e1:a4:b6:90:cf:12:4f:66:a4:81:
b3:3a:3b:db:59:70:ca:92:b5:35:89:d9:82:8d:89:5a:5a:34:
2f:a7:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:48 2025 by rpki-client